$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json) Hash identifier: 5/roJsXf+EZ+oupazOn9turk15GYPsz8vYHcVqgejfM= Subject key identifier: 20:60:77:88:C4:F1:29:3F:0F:9D:46:6B:FE:DC:52:56:25:02:0E:FA Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft Manifest number: 20 Signing time: Sun 19 May 2024 08:39:51 +0000 Manifest this update: Sun 19 May 2024 08:39:50 +0000 Manifest next update: Sun 26 May 2024 08:39:50 +0000 Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: 3/FXIRAhKEEMgqO468epJ6W+9sNtMe/YPyMjwsv0bNI=) 2: 45B4466AFE7F11EEADB89215C4F9AE02.roa (hash: JW221SdR0OgfqbHYXSY52jDrerqJ9Os9G5oX3VBUzJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Validity Not Before: May 19 08:39:50 2024 GMT Not After : May 26 08:39:50 2024 GMT Subject: CN=6649bad7-75bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:37:a2:ff:73:ca:d9:f0:2a:f5:f8:c6:e8: 0d:91:dc:23:60:9e:bb:a1:0e:fa:a3:08:63:8f:60: 1e:80:22:cd:7d:d4:0c:e5:c8:a6:50:84:92:83:38: c6:e3:a8:25:cb:15:fa:ff:d2:a5:b2:97:9a:c5:61: 2d:bf:4b:c8:6d:1f:ae:76:be:30:27:f4:19:b2:6c: e2:78:4d:24:a4:60:fd:b6:e4:09:49:e1:72:46:6e: c6:86:49:b0:25:6a:f2:19:99:cf:1b:51:79:7f:97: e0:e9:a4:e8:a3:ce:8f:e1:2a:39:20:0a:9f:ef:bb: 6f:f6:eb:05:07:40:22:24:78:ac:f5:20:b6:05:7d: d3:b6:dc:ff:36:a8:c4:f5:10:67:33:09:8f:61:bc: 03:27:e8:28:b4:ec:01:bb:03:19:fe:16:e2:af:eb: 70:bd:13:2a:1a:ce:cd:ac:b1:26:d0:a2:30:3d:4d: aa:94:62:04:6c:da:4b:f1:b6:e4:94:cd:84:a7:72: 72:08:c2:41:ce:d4:08:ea:e0:23:e4:1d:b8:9f:bd: 96:21:47:58:dc:66:e3:c8:14:0e:d5:43:70:5f:74: f6:ea:07:98:85:b4:32:84:40:6b:50:4c:5a:4b:07: 0b:0b:eb:61:14:9d:59:cd:6a:f2:32:09:4b:83:c5: 85:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:60:77:88:C4:F1:29:3F:0F:9D:46:6B:FE:DC:52:56:25:02:0E:FA X509v3 Authority Key Identifier: keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d5:9e:4d:5b:18:b5:3d:87:81:7a:39:e8:34:72:15:2b:4c: 94:48:48:07:58:96:6f:60:f3:a7:b4:a0:0c:2d:a5:b5:ad:17: 7a:ad:46:2b:28:66:b6:52:bc:f7:81:27:f1:68:83:00:c5:b5: fd:5a:91:29:08:c6:4d:b8:f6:b1:c7:25:25:20:4e:c5:f6:e9: 6c:8e:62:72:e5:9a:cf:c0:41:36:95:12:36:b6:c4:88:2f:ee: 3b:46:44:4b:c2:db:3f:35:e2:21:84:6f:74:b7:99:5c:82:d2: 12:55:74:5f:19:b6:76:b7:90:aa:0a:6f:df:e3:db:d1:e9:cf: 93:0e:78:a0:17:28:92:83:54:3b:9f:5d:ce:11:75:93:fe:fa: e6:f3:22:14:f0:df:0f:f2:d4:a4:df:4e:5f:60:76:dc:b1:0a: 91:9c:92:f9:15:76:4c:22:e4:fc:37:81:25:59:ed:2c:62:12: a7:37:ee:a6:1f:54:67:db:f1:6e:47:c6:5b:0e:cd:4c:1a:6f: 9a:f5:a1:b1:f2:1c:f4:55:a3:19:40:3e:d1:bd:1b:b6:a4:09: 95:6c:dd:da:ae:1a:35:5a:0e:45:48:60:4c:64:53:24:20:2d: 75:45:27:38:a2:81:d1:8f:6e:91:50:ac:ce:ac:de:3c:90:35: 31:69:ad:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjhEMDExMC8GA1UEBRMoMjU0RUFGNjQ5MDc1NEY1MDdEQjgxQ0U5MEREQjYyOUI2 MjJGNDY2MDAeFw0yNDA1MTkwODM5NTBaFw0yNDA1MjYwODM5NTBaMBgxFjAUBgNV BAMTDTY2NDliYWQ3LTc1YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF3Dei/3PK2fAq9fjG6A2R3CNgnruhDvqjCGOPYB6AIs191AzlyKZQhJKDOMbj qCXLFfr/0qWyl5rFYS2/S8htH652vjAn9BmybOJ4TSSkYP225AlJ4XJGbsaGSbAl avIZmc8bUXl/l+DppOijzo/hKjkgCp/vu2/26wUHQCIkeKz1ILYFfdO23P82qMT1 EGczCY9hvAMn6Ci07AG7Axn+FuKv63C9Eyoazs2ssSbQojA9TaqUYgRs2kvxtuSU zYSncnIIwkHO1Ajq4CPkHbifvZYhR1jcZuPIFA7VQ3BfdPbqB5iFtDKEQGtQTFpL BwsL62EUnVnNavIyCUuDxYVPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIGB3iMTx KT8PnUZr/txSViUCDvowHwYDVR0jBBgwFoAUJU6vZJB1T1B9uBzpDdtim2IvRmAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCOEQwLzQxRTJCRTI4RUI2 RTExRUU4M0UzQUU1MUM0RjlBRTAyL0pVNnZaSkIxVDFCOXVCenBEZHRpbTJJdlJt QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSlU2dlpKQjFUMUI5dUJ6cERkdGltMkl2Um1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC OEQwLzQxRTJCRTI4RUI2RTExRUU4M0UzQUU1MUM0RjlBRTAyL0pVNnZaSkIxVDFC OXVCenBEZHRpbTJJdlJtQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE/Vnk1bGLU9h4F6Oeg0chUrTJRISAdYlm9g86e0oAwtpbWtF3qtRiso ZrZSvPeBJ/FogwDFtf1akSkIxk249rHHJSUgTsX26WyOYnLlms/AQTaVEja2xIgv 7jtGREvC2z814iGEb3S3mVyC0hJVdF8Ztna3kKoKb9/j29Hpz5MOeKAXKJKDVDuf Xc4RdZP++ubzIhTw3w/y1KTfTl9gdtyxCpGckvkVdkwi5Pw3gSVZ7SxiEqc37qYf VGfb8W5HxlsOzUwab5r1obHyHPRVoxlAPtG9G7akCZVs3dquGjVaDkVIYExkUyQg LXVFJziigdGPbpFQrM6s3jyQNTFprbg= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org